Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/935ef5b8-ae10-378a-b09e-aa48aa9809dc.roa
File:                     935ef5b8-ae10-378a-b09e-aa48aa9809dc.roa (raw, json)
Hash identifier:          gSe3c0/dzmnN2NgltpVskLS/72FErALIA3gjb1MHRvI=
Subject key identifier:   33:E0:8C:58:09:17:92:96:DD:CE:48:0D:34:97:CA:D3:D7:D0:65:A9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F67C5E35396C301395E1E4D0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/935ef5b8-ae10-378a-b09e-aa48aa9809dc.roa
Signing time:             Fri 22 Nov 2024 10:19:23 +0000
ROA not before:           Fri 22 Nov 2024 10:19:23 +0000
ROA not after:            Thu 20 Feb 2025 10:19:23 +0000
asID:                     62240
IP address blocks:        142.252.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:7c:5e:35:39:6c:30:13:95:e1:e4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 10:19:23 2024 GMT
            Not After : Feb 20 10:19:23 2025 GMT
        Subject: CN=81debadc-bc80-4dd4-bd16-fb7669568eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0c:68:cf:8e:a6:db:a5:d9:ff:cf:36:86:8c:
                    14:a5:ec:80:05:b4:fa:d4:6e:6e:ab:a1:31:9a:ea:
                    40:a0:b3:b3:bf:d5:e2:8a:46:07:58:c2:97:d0:ef:
                    1f:35:f9:1d:ae:fe:e9:42:89:ac:14:0f:4f:6c:d4:
                    89:59:39:68:08:da:72:25:60:b5:0a:2a:cc:8e:20:
                    da:d2:89:2e:d9:b4:e3:8c:f2:45:bb:fd:13:c3:a7:
                    2a:76:7c:c8:b5:66:22:5a:8e:47:06:4b:e5:a5:69:
                    a8:f2:69:ba:ce:13:2c:69:02:9a:da:ca:92:5f:3e:
                    1f:c9:69:f4:88:74:31:3f:80:cd:ef:a3:76:75:84:
                    f3:d0:5e:9c:69:9c:5b:1f:fb:49:5c:f0:cf:ac:a1:
                    94:0d:c3:d3:a4:b9:fc:8d:6b:6b:e1:39:21:f9:5e:
                    ea:26:6b:5f:fc:7a:e9:d0:58:9c:81:d5:a0:b4:92:
                    5c:c0:96:ad:71:82:fb:e2:53:17:e7:d3:53:c8:50:
                    bf:35:da:2c:cb:c9:e2:f1:d0:45:d2:1f:3c:06:ab:
                    35:66:a5:72:79:5a:01:90:25:09:5a:57:07:61:72:
                    68:ba:34:98:aa:bc:c9:86:f4:80:6f:d1:c6:fe:f3:
                    e6:0f:b3:2e:5e:c2:22:9e:45:38:1a:9b:53:d5:55:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E0:8C:58:09:17:92:96:DD:CE:48:0D:34:97:CA:D3:D7:D0:65:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/935ef5b8-ae10-378a-b09e-aa48aa9809dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.252.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:6f:d2:94:54:02:92:0c:89:d5:b7:fb:8b:9c:50:b9:08:ed:
         6d:0e:58:8f:48:0c:10:20:ac:cc:0a:9f:41:93:fd:69:da:95:
         0e:fd:62:5b:ce:18:ef:12:02:a4:3f:5e:df:5e:fa:e7:e0:8d:
         5a:df:d1:94:40:79:73:27:99:d7:1d:c9:fe:82:12:51:e5:0d:
         24:3e:27:83:70:e2:5d:3c:95:2d:f9:1e:ef:d4:64:f7:44:c6:
         3b:fc:ba:52:41:31:0d:7a:6c:1e:23:ac:96:63:83:56:a4:06:
         ef:24:b0:00:d9:20:6e:d2:09:e1:90:67:3e:cb:e9:6a:9c:65:
         23:e2:75:76:f7:b2:f8:a7:72:fd:02:1c:c2:eb:13:81:aa:31:
         89:b0:81:a5:73:ea:a1:25:22:30:13:28:91:33:4d:4b:bd:85:
         0e:cb:a2:a1:8e:31:e3:ec:d0:74:ce:9d:ad:43:e5:40:9a:64:
         00:61:40:59:98:97:bd:48:e4:de:76:1f:34:80:d1:59:f9:07:
         96:1f:94:60:9d:ab:76:7f:db:d1:a0:6d:0a:e5:33:e7:b0:c5:
         e2:b5:5a:b9:29:29:50:b7:93:27:a6:a3:9a:58:c2:b9:3f:e2:
         3c:9b:c1:31:5c:0e:c7:df:11:7a:0c:4e:85:93:ad:80:63:a3:
         ed:b0:8a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----